Hacker News Reader

What I'm asking me myself everytime I see a post about data leak, could you sue a company for the leak?

You can sue almost anyone for almost anything. Could you win? IANAL, but I think you'd have to prove damages.

If they're in the UK you can report them to the regulator - the Information Commissioner.

They tend to take a warn then fine approach.